ByteOS Network

CVE Vulnerability Details :

CVE-2016-5424

PUBLISHED

More Info Official Page

Assigner-redhat

Assigner Org ID-53f830b8-0a3f-465b-8143-3b8a9948e749

Published At-09 Dec, 2016 | 23:00

Updated At-06 Aug, 2024 | 01:00

▼CVE Numbering Authority (CNA)

PostgreSQL before 9.1.23, 9.2.x before 9.2.18, 9.3.x before 9.3.14, 9.4.x before 9.4.9, and 9.5.x before 9.5.4 might allow remote authenticated users with the CREATEDB or CREATEROLE role to gain superuser privileges via a (1) " (double quote), (2) \ (backslash), (3) carriage return, or (4) newline character in a (a) database or (b) role name that is mishandled during an administrative operation.

Affected Products

Vendor

n/a

Product

n/a

Versions

Affected

Problem Types

Type	CWE ID	Description
text	N/A	n/a

Type: text

CWE ID: N/A

Description: n/a

References

Hyperlink	Resource
http://rhn.redhat.com/errata/RHSA-2016-1781.html	vendor-advisory x_refsource_REDHAT
https://www.postgresql.org/docs/current/static/release-9-4-9.html	x_refsource_CONFIRM
http://www.securitytracker.com/id/1036617	vdb-entry x_refsource_SECTRACK
http://rhn.redhat.com/errata/RHSA-2016-1821.html	vendor-advisory x_refsource_REDHAT
http://www.debian.org/security/2016/dsa-3646	vendor-advisory x_refsource_DEBIAN
https://security.gentoo.org/glsa/201701-33	vendor-advisory x_refsource_GENTOO
https://access.redhat.com/errata/RHSA-2017:2425	vendor-advisory x_refsource_REDHAT
https://www.postgresql.org/docs/current/static/release-9-5-4.html	x_refsource_CONFIRM
https://www.postgresql.org/docs/current/static/release-9-3-14.html	x_refsource_CONFIRM
https://www.postgresql.org/about/news/1688/	x_refsource_CONFIRM
https://www.postgresql.org/docs/current/static/release-9-2-18.html	x_refsource_CONFIRM
http://www.securityfocus.com/bid/92435	vdb-entry x_refsource_BID
http://rhn.redhat.com/errata/RHSA-2016-2606.html	vendor-advisory x_refsource_REDHAT
http://rhn.redhat.com/errata/RHSA-2016-1820.html	vendor-advisory x_refsource_REDHAT
https://www.postgresql.org/docs/current/static/release-9-1-23.html	x_refsource_CONFIRM

Hyperlink: http://rhn.redhat.com/errata/RHSA-2016-1781.html

Resource:

vendor-advisory

x_refsource_REDHAT

Hyperlink: https://www.postgresql.org/docs/current/static/release-9-4-9.html

Resource:

x_refsource_CONFIRM

Hyperlink: http://www.securitytracker.com/id/1036617

Resource:

vdb-entry

x_refsource_SECTRACK

Hyperlink: http://rhn.redhat.com/errata/RHSA-2016-1821.html

Resource:

vendor-advisory

x_refsource_REDHAT

Hyperlink: http://www.debian.org/security/2016/dsa-3646

Resource:

vendor-advisory

x_refsource_DEBIAN

Hyperlink: https://security.gentoo.org/glsa/201701-33

Resource:

vendor-advisory

x_refsource_GENTOO

Hyperlink: https://access.redhat.com/errata/RHSA-2017:2425

Resource:

vendor-advisory

x_refsource_REDHAT

Hyperlink: https://www.postgresql.org/docs/current/static/release-9-5-4.html

Resource:

x_refsource_CONFIRM

Hyperlink: https://www.postgresql.org/docs/current/static/release-9-3-14.html

Resource:

x_refsource_CONFIRM

Hyperlink: https://www.postgresql.org/about/news/1688/

Resource:

x_refsource_CONFIRM

Hyperlink: https://www.postgresql.org/docs/current/static/release-9-2-18.html

Resource:

x_refsource_CONFIRM

Hyperlink: http://www.securityfocus.com/bid/92435

Resource:

vdb-entry

x_refsource_BID

Hyperlink: http://rhn.redhat.com/errata/RHSA-2016-2606.html

Resource:

vendor-advisory

x_refsource_REDHAT

Hyperlink: http://rhn.redhat.com/errata/RHSA-2016-1820.html

Resource:

vendor-advisory

x_refsource_REDHAT

Hyperlink: https://www.postgresql.org/docs/current/static/release-9-1-23.html

Resource:

x_refsource_CONFIRM

▼Authorized Data Publishers (ADP)

CVE Program Container

References

Hyperlink	Resource
http://rhn.redhat.com/errata/RHSA-2016-1781.html	vendor-advisory x_refsource_REDHAT x_transferred
https://www.postgresql.org/docs/current/static/release-9-4-9.html	x_refsource_CONFIRM x_transferred
http://www.securitytracker.com/id/1036617	vdb-entry x_refsource_SECTRACK x_transferred
http://rhn.redhat.com/errata/RHSA-2016-1821.html	vendor-advisory x_refsource_REDHAT x_transferred
http://www.debian.org/security/2016/dsa-3646	vendor-advisory x_refsource_DEBIAN x_transferred
https://security.gentoo.org/glsa/201701-33	vendor-advisory x_refsource_GENTOO x_transferred
https://access.redhat.com/errata/RHSA-2017:2425	vendor-advisory x_refsource_REDHAT x_transferred
https://www.postgresql.org/docs/current/static/release-9-5-4.html	x_refsource_CONFIRM x_transferred
https://www.postgresql.org/docs/current/static/release-9-3-14.html	x_refsource_CONFIRM x_transferred
https://www.postgresql.org/about/news/1688/	x_refsource_CONFIRM x_transferred
https://www.postgresql.org/docs/current/static/release-9-2-18.html	x_refsource_CONFIRM x_transferred
http://www.securityfocus.com/bid/92435	vdb-entry x_refsource_BID x_transferred
http://rhn.redhat.com/errata/RHSA-2016-2606.html	vendor-advisory x_refsource_REDHAT x_transferred
http://rhn.redhat.com/errata/RHSA-2016-1820.html	vendor-advisory x_refsource_REDHAT x_transferred
https://www.postgresql.org/docs/current/static/release-9-1-23.html	x_refsource_CONFIRM x_transferred